libvpx (SUSE:Linux Enterprise Server 12 SP5) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server 12 SP5 package libvpx, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2023-5217 — CVSS 8.8 (high) — actively exploited: Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to…
• CVE-2019-9232 — CVSS 7.5 (high): In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no…
• CVE-2020-0034 — CVSS 7.5 (high): In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote…
• CVE-2019-9433 — CVSS 6.5 (medium): In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure…